Hello all,
tripwire's default policy includes /proc. Why, what's the point? At least in
my systems, its files change more often than my logs rotate (which despite my
efforts insist on rotating on a daily basis).
So, is it safe to just remove /proc from the policy? If so, why is it included
by default?
regards
FF